Senior Attack & Penetration Tester

EY; Des Moines (IA); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical & Dental

401(k) Plan

Job summary

EY is seeking a Senior Attack & Penetration Tester to plan, lead and execute sophisticated offensive security engagements across client environments. You will translate findings into actionable remediation and work with client teams to strengthen controls.

The role requires deep knowledge of MITRE ATT&CK, red team operations, and environment types (cloud, AD, web, API). Travel up to 80% and collaboration with EY teams globally.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, MIS, IT or related field and at least five years of offensive security experience.
• Hands-on experience planning and executing advanced red team engagements and adversary emulation.
• Experience in external and internal network penetration testing, including AD, cloud, API, and web testing.

Responsibilities

• Plan, lead and execute complex penetration testing and red team engagements.
• Translate testing results into clear, actionable risk, remediation priorities and executive-ready reports.
• Mentor junior team members and coordinate testing activities across distributed teams.

Skills

Penetration testing

Red team engagements

MITRE ATT&CK

Team leadership

Client communication

Education

Bachelor's degree in CS or related

Tools

Offensive security tooling

C2 platforms

Job description

EY is seeking a Senior Attack & Penetration Tester to plan, lead and execute sophisticated offensive security engagements across client environments. You will translate findings into actionable remediation and work with client teams to strengthen controls.

The role requires deep knowledge of MITRE ATT&CK, red team operations, and environment types (cloud, AD, web, API). Travel up to 80% and collaboration with EY teams globally.